Add TLS channel binding during NTLM authentication #1087

ThePirateWhoSmellsOfSunflowers · 2023-04-24T15:01:55Z

Based on #1042, this PR adds TLS channel binding (tls-server-end-point) support. The idea is to bind the outer secure connection (TLS in our case) to application data over an inner client-authenticated channel (NTLM here). This kind of channel binding seems to be the only suported by Microsoft Active Directory during NTLM authentication.

To perform channel binding during NTLM authentication, we need to add a new AV_PAIR MS-NLMP 2.2.2.1 within the AUTHENTICATE_MESSAGE MS-NLMP 2.2.1.3. This new AV_PAIR has AvId 0x000A (MsvAvChannelBindings). The Value field contains an MD5 hash of a gss_channel_bindings_struct. Basicaly we just have to put the sha256 of the server's certificate within this struct.

This PR also fixes a bug in the method pack_av_info() within NtlmClient class.

The logic for this PR is heavly inspired by "msldap", "minikerberos" and "asysocks" projects by @skelsec.

🌻

…ng are enforced on the DC please install cannatag/ldap3#1087 and cannatag/ldap3#1042

hughpyle · 2023-06-08T00:56:16Z

This works well for my use case (access to Active Directory with LdapEnforceChannelBinding set to "Always").

Neustradamus · 2023-11-04T16:09:38Z

@ThePirateWhoSmellsOfSunflowers: Good job for this part! :)

Hope a complete support ^^

For example, maybe you can see for:

Net_LDAP: https://github.com/pear/Net_LDAP
Net_LDAP2: https://github.com/pear/Net_LDAP2
php-Net_LDAP3: https://git.kolab.org/diffusion/PNL
node-ldapjs: https://github.com/ldapjs/node-ldapjs
go-ldap: https://github.com/go-ldap/ldap
a go ldap: https://github.com/mmitton/ldap
ldapsdk: https://github.com/pingidentity/ldapsdk
ldaptive: https://github.com/vt-middleware/ldaptive
ruby-net-ldap: https://github.com/ruby-ldap/ruby-net-ldap
ldap4net: https://github.com/flamencist/ldap4net

Linked to:

ThePirateWhoSmellsOfSunflowers · 2023-11-08T22:40:02Z

Hi @Neustradamus!

Thanks for the feedback! Unfortunately, my skills are limited to python and i'm just interested in "offensive" LDAP, so i don't plan to port it on other projects.

🌻

Neustradamus · 2023-11-08T22:59:03Z

@ThePirateWhoSmellsOfSunflowers: Thanks for your answer :)
I understand no problem, I hope that your improvement will be added quickly!

Use github.com/cannatag/ldap3#1087 to add LDAP Channel Binding support to the RBCD example script.

Use cannatag/ldap3#1087 to add LDAP Channel Binding support to the RBCD example script.

tomspencer · 2024-01-24T18:49:12Z

Any update on this? Requiring channel binding is quickly becoming the standard so this support would be hugely valuable.

Augustin-FL · 2024-03-06T08:56:40Z

hi @cannatag
possible to merge this PR?

cannatag · 2024-03-06T09:15:34Z

Hi Augustin, I’ll do it next week.Bye,GiovanniIl giorno 6 mar 2024, alle ore 09:56, Augustin FL ***@***.***> ha scritto: hi @cannatag possible to merge this PR? —Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you were mentioned.Message ID: ***@***.***>

ThePirateWhoSmellsOfSunflowers · 2024-03-06T09:42:56Z

Hi @cannatag!
Thanks for your message, is it possible to also take a look at #1042? Thanks

🌻

cannatag · 2024-03-06T09:47:27Z

Hi, I’ll work also on this next week.Bye,GiovanniIl giorno 6 mar 2024, alle ore 10:43, ThePirateWhoSmellsOfSunflowers ***@***.***> ha scritto: Hi @cannatag! Thanks for your message, is it possible to also take a look at #1042? Thanks 🌻 —Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you were mentioned.Message ID: ***@***.***>

Neustradamus · 2024-03-06T13:35:25Z

@ThePirateWhoSmellsOfSunflowers, @cannatag: Good news, soon one year of this PR!

cannatag · 2024-03-19T21:31:28Z

Thanks!

cannatag · 2024-03-19T21:58:17Z

Can you check the 2.10 version in dev? I don't have access to AD so I cannot check if this PR is working as expected.

Thanks,
Giovanni

ThePirateWhoSmellsOfSunflowers · 2024-03-19T22:43:32Z

Hello @cannatag,

Whoa thanks for the mass merging!
The PR is broken but I submitted a patch (see #1130), should work now.

🌻

dadevel · 2024-04-24T21:27:33Z

Is it possible to tag a new release that includes this PR? Would be nice for downstream projects (CC fortra/impacket#1657).

BotoX · 2024-07-09T11:14:21Z

For some reason I still can not connect to the active directory servers at our company after installing the latest ldap3:
pip install --upgrade git+https://github.com/ThePirateWhoSmellsOfSunflowers/ldap3@dev

My code looks like this:

        domain['_server'] = Server('AD_DOMAIN.COMPANY.COM', port=636, use_ssl=True, get_info=ALL)
        domain['_conn'] = Connection(domain['_server'], user=AD_USERNAME, password=AD_PASSWORD, channel_binding=TLS_CHANNEL_BINDING, authentication=NTLM, session_security=ENCRYPT, raise_exceptions=True)
        domain['_conn'].bind()

output:

DEBUG:ldap3:ERROR:detail level set to BASIC
DEBUG:ldap3:BASIC:instantiated Tls: <Tls(validate=<VerifyMode.CERT_NONE: 0>)>
DEBUG:ldap3:BASIC:instantiated Server: <Server(host='AD_DOMAIN.COMPANY.COM', port=636, use_ssl=True, allowed_referral_hosts=[('*', True)], tls=Tls(validate=<VerifyMode.CERT_NONE: 0>), get_info='ALL', mode='IP_V6_PREFERRED')>
DEBUG:ldap3:BASIC:instantiated <SyncStrategy>: <ldaps://AD_DOMAIN.COMPANY.COM:636 - ssl - user: AD_USERNAME - not lazy - unbound - closed - <no socket> - tls not started - not listening - No strategy - internal decoder - async - real DSA - not pooled - cannot stream output>
DEBUG:ldap3:BASIC:instantiated Connection: <Connection(server=Server(host='AD_DOMAIN.COMPANY.COM', port=636, use_ssl=True, allowed_referral_hosts=[('*', True)], tls=Tls(validate=<VerifyMode.CERT_NONE: 0>), get_info='ALL', mode='IP_V6_PREFERRED'), user='EDVZ\\sdhpcsetup', password='<stripped 20 characters of sensitive data>',session_security='ENCRYPT', auto_bind='DEFAULT', version=3, authentication='NTLM', client_strategy='SYNC', auto_referrals=True, check_names=True, read_only=False, lazy=False, raise_exceptions=True, fast_decoder=True, auto_range=True, return_empty_attributes=True, auto_encode=True, auto_escape=True, use_referral_cache=False)>
DEBUG:ldap3:BASIC:start BIND operation via <ldaps://AD_DOMAIN.COMPANY.COM:636 - ssl - user: AD_USERNAME - not lazy - unbound - closed - <no socket> - tls not started - not listening - SyncStrategy - internal decoder>
DEBUG:ldap3:BASIC:address for <ldaps://AD_DOMAIN.COMPANY.COM:636 - ssl> resolved as <[<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('123.45.14.74', 636)]>
DEBUG:ldap3:BASIC:address for <ldaps://AD_DOMAIN.COMPANY.COM:636 - ssl> resolved as <[<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('123.45.14.75', 636)]>
DEBUG:ldap3:BASIC:address for <ldaps://AD_DOMAIN.COMPANY.COM:636 - ssl> resolved as <[<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('123.45.14.76', 636)]>
DEBUG:ldap3:BASIC:obtained candidate address for <ldaps://AD_DOMAIN.COMPANY.COM:636 - ssl>: <[<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('123.45.14.74', 636)]> with mode IP_V6_PREFERRED
DEBUG:ldap3:BASIC:obtained candidate address for <ldaps://AD_DOMAIN.COMPANY.COM:636 - ssl>: <[<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('123.45.14.75', 636)]> with mode IP_V6_PREFERRED
DEBUG:ldap3:BASIC:obtained candidate address for <ldaps://AD_DOMAIN.COMPANY.COM:636 - ssl>: <[<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('123.45.14.76', 636)]> with mode IP_V6_PREFERRED
DEBUG:ldap3:BASIC:try to open candidate address [<AddressFamily.AF_INET: 2>, <SocketKind.SOCK_STREAM: 1>, 6, '', ('123.45.14.74', 636)]
DEBUG:ldap3:BASIC:start NTLM BIND operation via <ldaps://AD_DOMAIN.COMPANY.COM:636 - ssl - user: AD_USERNAME - not lazy - unbound - open - <local: 123.45.10.42:52353 - remote: 123.45.14.74:636> - tls not started - listening - SyncStrategy - internal decoder>
Traceback (most recent call last):
  File "./ad_hpc_user.py", line 163, in <module>
    pers_conn = connect_domain(domains['pers'])
  File "./ad_hpc_user.py", line 80, in connect_domain
    domain['_conn'].bind()
  File "/usr/local/lib/python3.8/dist-packages/ldap3/core/connection.py", line 655, in bind
    response = self.do_ntlm_bind(controls)
  File "/usr/local/lib/python3.8/dist-packages/ldap3/core/connection.py", line 1459, in do_ntlm_bind
    response = self.post_send_single_response(self.send('bindRequest', request, controls))
  File "/usr/local/lib/python3.8/dist-packages/ldap3/strategy/sync.py", line 179, in post_send_single_response
    responses, result = self.get_response(message_id)
  File "/usr/local/lib/python3.8/dist-packages/ldap3/strategy/base.py", line 417, in get_response
    raise LDAPOperationResult(result=result['result'], description=result['description'], dn=result['dn'], message=result['message'], response_type=result['type'])
ldap3.core.exceptions.LDAPInvalidCredentialsResult: LDAPInvalidCredentialsResult - 49 - invalidCredentials - None - 80090346: LdapErr: DSID-0C0907FB, comment: AcceptSecurityContext error, data 80090346, v4f7c - bindResponse - None

I'm definitely using the new version of the library, as I can trigger the following exception:

  File "/usr/local/lib/python3.8/dist-packages/ldap3/core/connection.py", line 345, in __init__
    raise LDAPInvalidValueError(self.last_error)
ldap3.core.exceptions.LDAPInvalidValueError: "channel_binding" option only available for NTLM authentication over LDAPS

ThePirateWhoSmellsOfSunflowers · 2024-07-09T11:25:44Z

Hi @BotoX!

Not sure why but in your snippet you use both channel_binding=TLS_CHANNEL_BINDING and session_security=ENCRYPT, those two options are not compatible because on is for Channel Binding and the other one is for LDAP Signing.

🌻

BotoX · 2024-07-09T21:21:35Z

Hi @BotoX!

Not sure why but in your snippet you use both channel_binding=TLS_CHANNEL_BINDING and session_security=ENCRYPT, those two options are not compatible because on is for Channel Binding and the other one is for LDAP Signing.

🌻

Hey @ThePirateWhoSmellsOfSunflowers, thanks for the quick response.
I've added session_security=ENCRYPT just to see if it changes anything. (More security / encryption = better, right?)
Sadly it makes no difference when I remove it, the exact same error persists.

To be clear my connection code looks like this now:

        domain['_server'] = Server('AD_DOMAIN.COMPANY.COM', port=636, use_ssl=True, get_info=ALL)
        domain['_conn'] = Connection(domain['_server'], user=AD_USERNAME, password=AD_PASSWORD, channel_binding=TLS_CHANNEL_BINDING, authentication=NTLM, raise_exceptions=True)
        domain['_conn'].bind()

and I get the exact same log output as above (except for session_security='ENCRYPT' in the Connection object).

ThePirateWhoSmellsOfSunflowers · 2024-07-09T21:47:09Z

Mhhh hard to blind debug, sorry.

Last thing, can you try something like

$ openssl s_client -connect AD_DOMAIN.COMPANY.COM:636 -servername AD_DOMAIN.COMPANY.COM 2>/dev/null | openssl x509 -noout -text | grep 'Signature Algorithm'

(source)

According to the RFC

Description: The hash of the TLS server's certificate [RFC5280] as it
appears, octet for octet, in the server's Certificate message. Note
that the Certificate message contains a certificate_list, in which
the first element is the server's certificate.

The hash function is to be selected as follows:

o if the certificate's signatureAlgorithm uses a single hash
function, and that hash function is either MD5 [RFC1321] or SHA-1
[RFC3174], then use SHA-256 [FIPS-180-3];

o if the certificate's signatureAlgorithm uses a single hash
function and that hash function neither MD5 nor SHA-1, then use
the hash function associated with the certificate's
signatureAlgorithm;

o if the certificate's signatureAlgorithm uses no hash functions or
uses multiple hash functions, then this channel binding type's
channel bindings are undefined at this time (updates to is channel
binding type may occur to address this issue if it ever arises).

Maybe your certificate is not signed with MD5, SHA1 or SHA256 ?

🌻

BotoX · 2024-07-11T08:32:33Z

Maybe your certificate is not signed with MD5, SHA1 or SHA256 ?

You are correct:

        Signature Algorithm: sha384WithRSAEncryption
    Signature Algorithm: sha384WithRSAEncryption

ThePirateWhoSmellsOfSunflowers · 2024-07-11T08:46:51Z

Nice!
So now you can to change this part

ldap3/ldap3/core/connection.py

Lines 1407 to 1417 in 86a9e7a

    
           from hashlib import sha256, md5 
        
           self.ntlm_client.tls_channel_binding = True 
        
           peer_certificate_sha256 = sha256(self.server.tls.peer_certificate).digest() 
        
           # https://datatracker.ietf.org/doc/html/rfc2744#section-3.11 
        
           channel_binding_struct = bytes() 
        
           initiator_address = b'\x00'*8 
        
           acceptor_address = b'\x00'*8 
        
           # https://datatracker.ietf.org/doc/html/rfc5929#section-4 
        
           application_data_raw = b'tls-server-end-point:' + peer_certificate_sha256

with

 from hashlib import sha384, md5 
 self.ntlm_client.tls_channel_binding = True 
 peer_certificate_sha384 = sha384(self.server.tls.peer_certificate).digest() 
  
 # https://datatracker.ietf.org/doc/html/rfc2744#section-3.11 
 channel_binding_struct = bytes() 
 initiator_address = b'\x00'*8 
 acceptor_address = b'\x00'*8 
  
 # https://datatracker.ietf.org/doc/html/rfc5929#section-4 
 application_data_raw = b'tls-server-end-point:' + peer_certificate_sha384

I'll submit a better PR if it works.

🌻

ThePirateWhoSmellsOfSunflowers · 2024-07-11T12:15:58Z

can you test this branch please ?

https://github.com/ThePirateWhoSmellsOfSunflowers/ldap3/tree/fix_server_to_endpoint_hash

(don't forget to add the cryptography package)

🌻

BotoX · 2024-07-12T06:37:52Z

can you test this branch please ?

https://github.com/ThePirateWhoSmellsOfSunflowers/ldap3/tree/fix_server_to_endpoint_hash

Thank you @ThePirateWhoSmellsOfSunflowers

I can connect to the active directory / ldap with that branch now 👍

Had to apply this patch in order to install it on Linux though: 8eca7c8

Use cannatag/ldap3#1087 to add LDAP Channel Binding support to the RBCD example script.

ThePirateWhoSmellsOfSunflowers added 3 commits April 21, 2023 13:23

Add Channel Binding option with NTLM authentication

639d0ae

typo in variable name

9b78bf8

add doc for tls channel binding

a212e72

ThePirateWhoSmellsOfSunflowers added a commit to the-useless-one/pywerview that referenced this pull request May 19, 2023

[WIP] pywerview can now work when NTLM sign/seal or TLS Channel Bindi…

7f6284d

…ng are enforced on the DC please install cannatag/ldap3#1087 and cannatag/ldap3#1042

ThePirateWhoSmellsOfSunflowers mentioned this pull request Sep 19, 2023

Authentication error for Windows Server 2022? ly4k/Certipy#167

Closed

dadevel added a commit to dadevel/impacket that referenced this pull request Nov 28, 2023

Support channel binding in rbcd.py

7c317df

Use github.com/cannatag/ldap3#1087 to add LDAP Channel Binding support to the RBCD example script.

dadevel mentioned this pull request Nov 28, 2023

Support channel binding in rbcd.py fortra/impacket#1657

Open

dadevel added a commit to dadevel/impacket that referenced this pull request Nov 28, 2023

Support channel binding in rbcd.py

42779fa

Use cannatag/ldap3#1087 to add LDAP Channel Binding support to the RBCD example script.

dadevel added a commit to dadevel/impacket that referenced this pull request Nov 28, 2023

Support channel binding in rbcd.py

33282b4

Use cannatag/ldap3#1087 to add LDAP Channel Binding support to the RBCD example script.

dadevel added a commit to dadevel/impacket that referenced this pull request Nov 28, 2023

Support channel binding in rbcd.py

7e38707

Use cannatag/ldap3#1087 to add LDAP Channel Binding support to the RBCD example script.

Merge branch 'dev' into add_ntlm_channel_binding

9dca504

cannatag merged commit d3de6af into cannatag:dev Mar 19, 2024

ThePirateWhoSmellsOfSunflowers mentioned this pull request Mar 19, 2024

fix variable name after merge #1130

Merged

zeroSteiner mentioned this pull request Apr 24, 2024

LDAPS Channel Binding for NTLM and Kerberos rapid7/metasploit-framework#19132

Merged

7 tasks

Zamanry mentioned this pull request May 3, 2024

LDAP Channel Binding Support CroweCybersecurity/ad-ldap-enum#33

Open

3ldidi94 mentioned this pull request Jun 19, 2024

Unable to bind when DC with ldap signing +channel binding enabled franc-pentest/ldeep#46

Closed

ThePirateWhoSmellsOfSunflowers mentioned this pull request Jul 12, 2024

fix CBT computing when cert digest algo is not MD5, SHA1 or SHA256 #1151

Open

dadevel added a commit to dadevel/impacket that referenced this pull request Nov 11, 2024

Support channel binding in rbcd.py

d3fac85

Use cannatag/ldap3#1087 to add LDAP Channel Binding support to the RBCD example script.

dadevel added a commit to dadevel/impacket that referenced this pull request Dec 14, 2024

Support channel binding in rbcd.py

9ca1270

Use cannatag/ldap3#1087 to add LDAP Channel Binding support to the RBCD example script.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add TLS channel binding during NTLM authentication #1087

Add TLS channel binding during NTLM authentication #1087

ThePirateWhoSmellsOfSunflowers commented Apr 24, 2023

hughpyle commented Jun 8, 2023

Neustradamus commented Nov 4, 2023 •

edited

Loading

ThePirateWhoSmellsOfSunflowers commented Nov 8, 2023

Neustradamus commented Nov 8, 2023

tomspencer commented Jan 24, 2024

Augustin-FL commented Mar 6, 2024

cannatag commented Mar 6, 2024 via email

ThePirateWhoSmellsOfSunflowers commented Mar 6, 2024

cannatag commented Mar 6, 2024 via email

Neustradamus commented Mar 6, 2024

cannatag commented Mar 19, 2024

cannatag commented Mar 19, 2024

ThePirateWhoSmellsOfSunflowers commented Mar 19, 2024

dadevel commented Apr 24, 2024

BotoX commented Jul 9, 2024

ThePirateWhoSmellsOfSunflowers commented Jul 9, 2024 •

edited

Loading

BotoX commented Jul 9, 2024

ThePirateWhoSmellsOfSunflowers commented Jul 9, 2024

BotoX commented Jul 11, 2024

ThePirateWhoSmellsOfSunflowers commented Jul 11, 2024

ThePirateWhoSmellsOfSunflowers commented Jul 11, 2024

BotoX commented Jul 12, 2024 •

edited

Loading

Add TLS channel binding during NTLM authentication #1087

Add TLS channel binding during NTLM authentication #1087

Conversation

ThePirateWhoSmellsOfSunflowers commented Apr 24, 2023

hughpyle commented Jun 8, 2023

Neustradamus commented Nov 4, 2023 • edited Loading

ThePirateWhoSmellsOfSunflowers commented Nov 8, 2023

Neustradamus commented Nov 8, 2023

tomspencer commented Jan 24, 2024

Augustin-FL commented Mar 6, 2024

cannatag commented Mar 6, 2024 via email

ThePirateWhoSmellsOfSunflowers commented Mar 6, 2024

cannatag commented Mar 6, 2024 via email

Neustradamus commented Mar 6, 2024

cannatag commented Mar 19, 2024

cannatag commented Mar 19, 2024

ThePirateWhoSmellsOfSunflowers commented Mar 19, 2024

dadevel commented Apr 24, 2024

BotoX commented Jul 9, 2024

ThePirateWhoSmellsOfSunflowers commented Jul 9, 2024 • edited Loading

BotoX commented Jul 9, 2024

ThePirateWhoSmellsOfSunflowers commented Jul 9, 2024

BotoX commented Jul 11, 2024

ThePirateWhoSmellsOfSunflowers commented Jul 11, 2024

ThePirateWhoSmellsOfSunflowers commented Jul 11, 2024

BotoX commented Jul 12, 2024 • edited Loading

Neustradamus commented Nov 4, 2023 •

edited

Loading

ThePirateWhoSmellsOfSunflowers commented Jul 9, 2024 •

edited

Loading

BotoX commented Jul 12, 2024 •

edited

Loading